Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/iMMDQPxmEunva-6qW_k1RXMrqUw.roa
File: iMMDQPxmEunva-6qW_k1RXMrqUw.roa (raw, json)
Hash identifier: DVv/oLi42dPU7BobBX5SMJzy6a3Iz8NREOdCrON/nfA=
Subject key identifier: 88:C3:03:40:FC:66:12:E9:EF:6B:EE:AA:5B:F9:35:45:73:2B:A9:4C
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019C9E4ACD15190F37790793065862E0B389
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/iMMDQPxmEunva-6qW_k1RXMrqUw.roa
Signing time: Fri 27 Feb 2026 08:50:28 +0000
ROA not before: Fri 27 Feb 2026 08:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21507
IP address blocks: 195.63.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:4a:cd:15:19:0f:37:79:07:93:06:58:62:e0:b3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Feb 27 08:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88c30340fc6612e9ef6beeaa5bf93545732ba94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:24:07:42:91:00:eb:49:7f:ec:40:e3:c0:
b3:b2:05:30:b3:92:7c:f1:84:41:00:a7:e3:18:61:
94:73:3e:4f:96:72:fa:dd:a6:6c:18:20:2c:35:92:
b2:c8:8f:17:5e:e1:53:2a:6e:aa:70:09:3e:3a:b3:
3d:49:54:99:03:48:14:b2:89:96:a3:e4:e6:10:09:
54:0c:88:e6:eb:ee:cb:3a:12:80:32:94:e7:e9:4d:
52:de:a3:66:65:62:eb:bc:97:f5:3f:7a:eb:35:02:
88:c8:e2:7e:ee:4e:47:3a:00:4b:bb:32:ee:30:05:
4d:76:8c:3d:ba:0b:20:52:da:77:b5:74:93:96:83:
d8:1a:22:8a:01:2b:ad:de:15:56:e8:b2:92:67:fb:
96:1b:94:df:2f:0f:d1:ea:d2:80:5b:6c:29:e1:0e:
fb:b8:b4:5b:7f:56:e3:bc:42:91:94:eb:2a:27:31:
ea:93:b3:3f:b2:3b:16:23:52:43:e2:a8:51:a2:60:
a4:3e:3b:56:45:5a:ed:6f:c3:25:e8:52:a0:6d:ad:
e4:eb:80:0c:5e:8f:92:0b:cb:e6:0b:b9:b3:fa:47:
b5:b0:ac:ab:1a:60:4a:45:cd:bf:23:5d:aa:5c:87:
fc:a6:20:7c:dc:95:e2:d3:a6:c3:57:c2:c4:d6:30:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:03:40:FC:66:12:E9:EF:6B:EE:AA:5B:F9:35:45:73:2B:A9:4C
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/iMMDQPxmEunva-6qW_k1RXMrqUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.63.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:f2:59:f4:5d:1a:f6:a5:70:95:ca:21:af:a7:94:e1:34:30:
10:4c:23:41:e3:a4:62:76:fa:65:c0:d5:a9:b8:c5:be:11:10:
ea:3f:86:6f:82:19:87:9a:20:cc:30:9d:9a:24:7a:bc:d7:bc:
9b:7f:0a:dc:30:72:af:f1:ed:a0:3b:e4:b3:d4:6d:5a:06:9a:
fa:d6:48:a8:2d:40:71:f7:c6:68:65:c6:ca:d4:86:0b:a0:15:
da:1b:4d:03:80:c6:35:18:23:3f:9a:d8:c7:df:67:e3:4e:ad:
7b:e1:4b:54:f8:ac:3c:c6:a7:4c:ce:90:01:97:f7:d5:49:f3:
55:99:8d:31:8a:fa:46:ce:94:46:5e:3c:63:f0:8b:bf:b5:d4:
84:bf:f0:a8:bd:83:94:4d:02:c7:3d:2b:c6:56:fd:35:3f:ac:
2e:19:3a:8d:9c:b1:bc:ef:1c:aa:49:5f:64:ab:aa:0a:0e:98:
8d:44:a5:42:39:4f:3a:da:05:b1:e2:5d:79:49:d8:69:61:14:
44:90:52:c8:cb:23:5e:1b:d2:dc:25:e5:d0:85:26:af:0e:ab:
92:f9:bf:d3:ee:8d:d6:71:8f:7c:03:1c:96:69:5d:f0:d3:64:
72:28:f3:fa:99:95:7d:5c:72:66:24:7a:6b:34:2b:96:22:e4:
48:9e:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:13 2026 by rpki-client